Bugtraq mailing list archives

Re: /proc filesystem allows bypassing directory permissions on Linux


From: psz () maths usyd edu au
Date: Sun, 25 Oct 2009 10:40:09 +1100

Dear Pavel,

... that's exactly the problem.

I see, the /proc/*/fd/* objects seem "confused": are they symlinks,
hardlinks, or open file descriptors? I guess should always act as
the latter, where access mode flags (O_RDONLY or O_RDWR) are set at
open() and not changeable afterwards in fcntl(). Any open() on them
should behave as a dup().

Cheers, Paul

Paul Szabo   psz () maths usyd edu au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia


Current thread: